One has to consider that IT is employed in nearly every business be it a large multinational to a small corner shop. When a business has staff that is trained in security the decision maker will have the neccessary input to make an informed decision, but what happens when a small business is a one man job who might not have the necessary skills?

I think it’s quite possible that some people wouldn’t even know what security really is or have a very limited scope on the definition such as protecting against viruses or just installing a firewall without even knowing what a firewall is.

Hopefully if any such person were to read this article it will help in giving a clearer picture of what security really is and what it involves.

But when you understand that security is a process (or an element of various processes), not an endpoint, it becomes easier to see real benefits and return on investment.